it would be good if osquery could perhaps read a cookie or some other piece of state passed down from the SSO to tie them positively together at that moment